CVE-2008-7237

3 documents3 sources
Severity
4.0MEDIUM
EPSS
7.0%
top 8.53%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Application Server
Timeline
PublishedSep 14
Latest updateMay 13

Description

Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9.0.4.3 and 10.1.2.2 allows remote authenticated users to affect confidentiality via unknown vectors, aka AS06.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 8.0 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/application_server10.1.2.2, 9.0.4.3+1

Patches

Patch: www.us-cert.gov ↗Patch: www.us-cert.gov ↗

🔴Vulnerability Details

2
GHSA
GHSA-rwj4-529v-8q2x: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9↗2022-05-13
▶
CVEList
CVE-2008-7237: Unspecified vulnerability in the Oracle Internet Directory component in Oracle Application Server 9↗2009-09-14
▶